Gateway for mobile terminated wireless communication in a 5g or other next generation wireless network

ABSTRACT

According to one or more embodiments, a system can comprise a processor and a memory that can store executable instructions that, when executed by the processor, facilitate performance of operations. The operations can include establishing a wireless connection to a wireless network. The operations can further include receiving, via the wireless connection, data from a gateway device, that has been communicated via a network device of a publicly accessible network, wherein the data has been compared, by the gateway device, to a template of anomalous activity.

RELATED APPLICATION

The subject patent application is a continuation of, and claims priorityto, U.S. Pat. Application No. 16/700,127, filed Dec. 2, 2019, andentitled “GATEWAY FOR MOBILE TERMINATED WIRELESS COMMUNICATION IN A 5GOR OTHER NEXT GENERATION WIRELESS NETWORK,” the entirety of whichpriority application is hereby incorporated by reference herein.

TECHNICAL FIELD

The subject application is related to communication networks, and, forexample, to network gateways in advanced networks, such as in a fifthgeneration (5G) network or beyond.

BACKGROUND

With the increase in the use of 5G and other modem networks comes anincrease in the need for authentication of communications betweendevices. This can be especially important for communications receivedfrom the Internet, which, as a publicly accessible network source, canrender devices receiving the communication vulnerable to data mining andincreased security risks, including malware, botnets, and DDoS(Distributed Denial of Service) attacks. One type of device that can bevulnerable to these issues are devices that are sometimes termedInternet of Things (IoT) devices. e.g., refrigerators, surveillancecameras, thermostats, and control systems. These devices may not havethe latest security technologies included within their operatingsoftware, or may not be securely configured by default.

When devices are connected to publicly accessible network sources via awide area network (WAN), such as a wireless communication network, anetwork provider can, in many circumstances, provide additionalprotection for these devices. With wireless networks problems can occurhowever, because of the variety of different devices that can beconnected and the mobility of devices. Also, often devices often cannotimplement additional protections natively because of outdated or sparsehardware or software limitations, e.g., IoT devices especially, havethese issues. Another issue with IoT devices is that, while thesedevices can be connected to a network that could provide enhancedsecurity, because of limited capabilities, the devices may not be ableto receive updates for many reasons, making them vulnerable to modemattacks in many circumstances.

BRIEF DESCRIPTION OF THE DRAWINGS

The technology described herein is illustrated by way of example and notlimited in the accompanying figures in which like reference numeralsindicate similar elements and in which:

FIG. 1 illustrates a block diagram of an example, non-limiting gatewaysystem that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein.

FIG. 2 illustrates a block diagram of an example, non-limiting systemthat can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein.

FIG. 3 illustrates a block diagram of an example, non-limiting systemthat can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein.

FIG. 4 illustrates a block diagram of an example, non-limiting systemthat can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein.

FIG. 5 illustrates an implementation of an example of non-limitingsystem that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network by employingartificial intelligence and machine learning (AI/ML) components, inaccordance with one or more embodiments described herein.

FIG. 6 . illustrates an implementation of an example of non-limitingsystem that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a connectionless wireless network,in accordance with one or more embodiments described herein.

FIG. 7 depicts a flow diagram representing example operations of a userequipment (UE) device, in accordance with various aspects andimplementations of the subject disclosure.

FIG. 8 is a schematic block diagram of a computing environment withwhich the disclosed subject matter can interact, in accordance with oneor more embodiments described herein.

FIG. 9 is a block diagram of an example mobile handset operable toengage in a system architecture that facilitates wireless communicationsaccording to one or more embodiments described herein.

FIG. 10 illustrates a suitable computing environment in which thevarious aspects of this disclosure can be implemented, in accordancewith various aspects and implementations of the subject disclosure.

DETAILED DESCRIPTION

Generally speaking, one or more embodiments described herein providemechanisms and signaling to facilitate providing a gateway for publiclyaccessible communications to reach devices via a wireless network, inaccordance with one or more embodiments.

It should be understood that any of the examples and terms used hereinare non-limiting. For instance, the examples are based on 5Gcommunications between a UE exemplified as a smartphone or the like andnetwork devices; however virtually any communications devices canbenefit from the technology described herein, and/or their use indifferent spectrums can likewise benefit. Thus, any of the embodiments,aspects, concepts, structures, functionalities or examples describedherein are non-limiting, and the technology can be used in various waysthat provide benefits and advantages in radio communications in general.

One or more embodiments are now described with reference to thedrawings, wherein like reference numerals are used to refer to likeelements throughout. In the following description, for purposes ofexplanation, numerous specific details are set forth in order to providea thorough understanding of the various embodiments. It is evident,however, that the various embodiments can be practiced without thesespecific details (and without applying to any particular networkedenvironment or standard).

Further, the various embodiments can be implemented as a method,apparatus or article of manufacture using standard programming and/orengineering techniques to produce software, firmware, hardware, or anycombination thereof to control a computer to implement the disclosedsubject matter. The term “article of manufacture” as used herein isintended to encompass a computer program accessible from anycomputer-readable (or machine-readable) device or computer-readable (ormachine-readable) storage/communications media. For example, computerreadable storage media can comprise, but are not limited to, magneticstorage devices (e.g., hard disk, floppy disk, magnetic strips), opticaldisks (e.g., compact disk (CD), digital versatile disk (DVD)), smartcards, and flash memory devices (e.g., card, stick, key drive). Ofcourse, those skilled in the art will recognize that many modificationscan be made to this configuration without departing from the scope orspirit of the various embodiments.

In addition, one or more embodiments described herein can be directedtowards a multi-connectivity framework that supports the operation ofNew Radio (NR, also termed 5G). As will be understood, one or moreembodiments can allow an integration of UEs with network assistance, bysupporting control and mobility functionality on cellular links, e.g.Long Term Evolution (LTE) or NR. One or more embodiments can providebenefits including, improved security system robustness, reducedoverhead, and global resource management.

It should be understood that any of the examples and terms used hereinare non-limiting. For instance, while examples are generally directed tonon-standalone operation where the NR backhaul links are operating onmmWave bands and the control plane links are operating on sub-6 GHz LTEbands, it should be understood that it is straightforward to extend thetechnology described herein to scenarios in which the sub-6 GHz anchorcarrier providing control plane functionality could also be based on NR.As such, any of the examples herein are non-limiting examples, any ofthe embodiments, aspects, concepts, structures, functionalities orexamples described herein are non-limiting, and the technology can beused in various ways that provide benefits and advantages in radiocommunications in general.

In some embodiments the non-limiting term “radio network node” or simply“network node,” “radio network device or simply “network device” is usedherein. These terms may be used interchangeably, and refer to any typeof network node that serves user equipment and/or connected to othernetwork node or network element or any radio node from where userequipment receives signal. Examples of radio network nodes are Node B,base station (BS), multistandard radio (MSR) node such as MSR BS,gNodeB, eNode B, network controller, radio network controller (RNC),base station controller (BSC), relay, donor node controlling relay, basetransceiver station (BTS), access point (AP), transmission points,transmission nodes, RRU, RRH, nodes in distributed antenna system (DAS),etc.

In some embodiments, the non-limiting term integrated access backhaul(IAB) is used. In Release 16 of the 3rd Generation Partnership Project(3GPP) specification, an IAB framework based on fixed relays isstandardized. This Release 16 IAB framework allows for a multi-hopnetwork based on a hierarchical tree architecture. As described furtherbelow, in some embodiments, one or more of the non-limiting terms “relaynode,” “mobile relay node,” “anchor node,” and “mobile base station” candescribe mobile relay nodes supporting a mobile IAB network. It shouldbe appreciated that notwithstanding some descriptions herein referringto concepts of wireless base stations being “fixed,” “stationary” orsimilar terms, and “mobile,” “nonfixed” or similar terms, these termsdescribing a capacity for movement are not limiting, e.g., in differentembodiments, a mobile base station described herein can be fixed inposition, and vice versa.

In some embodiments the non-limiting term UE is used, and can refer toany type of device that can communicate with a network node in acellular or mobile communication system. A UE can have one or moreantenna panels having vertical and horizontal elements. Examples of a UEcomprise a target device, device to device (D2D) UE, machine type UE orUE capable of machine to machine (M2M) communications, personal digitalassistant (PDA), tablet, mobile terminals, smart phone, laptop mountedequipment (LME), universal serial bus (USB) dongles enabled for mobilecommunications, a computer having mobile capabilities, a mobile devicesuch as cellular phone, a laptop having laptop embedded equipment (LEE,such as a mobile broadband adapter), a tablet computer having a mobilebroadband adapter, a wearable device, a virtual reality (VR) device, aheads-up display (HUD) device, a smart car, a machine-type communication(MTC) device, and the like. User equipment UEs 302A-B can also compriseIOT devices that communicate wirelessly.

Embodiments described herein can be exploited in substantially anywireless communication technology, comprising, but not limited to,wireless fidelity (Wi-Fi), global system for mobile communications(GSM), universal mobile telecommunications system (UMTS), worldwideinteroperability for microwave access (WiMAX), enhanced general packetradio service (enhanced GPRS), third generation partnership project(3GPP) long term evolution (LTE), third generation partnership project 2(3GPP2) ultra mobile broadband (UMB), fifth generation core (5G Core),fifth generation option 3x (5G Option 3x), high speed packet access(HSPA), Z-Wave, Zigbee and other 802.XX wireless technologies and/orlegacy telecommunication technologies.

Some embodiments are described in particular with exampleimplementations in 5G NR systems. The embodiments are however applicableto any radio access technology (RAT) or multi-RAT system where the userequipment operates using multiple carriers, e.g. LTE FDD/TDD,WCMDA/HSPA, GSM/GERAN, Wi-Fi, WLAN, WiMax, CDMA2000, etc.

FIG. 1 illustrates a block diagram of an example, non-limiting gatewaysystem 100 that can facilitate providing a gateway for publiclyaccessible communications to reach devices via a wireless network, inaccordance with one or more embodiments described herein. Repetitivedescription of like elements and/or processes employed in respectiveembodiments is omitted for sake of brevity.

In some embodiments, gateway system 100 can comprise network device 150,Internet 180, originating device 110, access point 185, and targetdevice 115. Network device 150 can include processor 160, storage device170, memory 165, and computer-executable components 120, in accordancewith one or more embodiments. Computer executable components 120 caninclude external network component 108, pattern searching component 112,relaying component 116, and any other components associated with gatewaysystem 100 as disclosed herein. In one or more embodiments, networkdevice 150 can receive a communication from originating device 110 viaInternet 180, process the communication, and relay the communication totarget device 115 via wireless communication with access point 185.

According to multiple embodiments, network device 150 includes memory165 that can store one or more computer and/or machine readable,writable, and/or executable components and/or instructions that, whenexecuted by processor 160, can facilitate performance of operationsdefined by the executable component(s) and/or instruction(s). Forexample, memory 165 can store computer executable components that can,when executed by processor 160, execute the components depicted in thedrawings and described herein.

In some embodiments, memory 165 can comprise volatile memory (e.g.,random access memory (RAM), static RAM (SRAM), dynamic RAM (DRAM), etc.)and/or non-volatile storage 170 (e.g., read only memory (ROM),programmable ROM (PROM), electrically programmable ROM (EPROM),electrically erasable programmable ROM (EEPROM), etc.) that can employone or more memory architectures. Further examples of memory 165 aredescribed below with reference to system memory 1016 and FIG. 10 . Suchexamples of memory 165 can be employed to implement any embodiments ofthe subject disclosure.

According to multiple embodiments, processor 160 can comprise one ormore processors and/or electronic circuitry that can implement one ormore computer and/or machine readable, writable, and/or executablecomponents and/or instructions that can be stored on memory 165. Forexample, processor 160 can perform various operations that can bespecified by such computer and/or machine readable, writable, and/orexecutable components and/or instructions including, but not limited to,logic, control, input/output (I/O), arithmetic, and/or the like. In someembodiments, processor 160 can comprise one or more of a centralprocessing unit, a multi-core processor, a microprocessor, dualmicroprocessors, a microcontroller, a System on a Chip (SOC), an arrayprocessor, a vector processor, and/or another type of processor. Furtherexamples of processor 160 are described below with reference toprocessing unit 1014 of FIG. 10 . Such examples of processor 160 can beemployed to implement any embodiments of the subject disclosure.

In some embodiments, elements of gateway system 100, including, but notlimited to memory 165, processor 160, external network component 108,pattern searching component 112, relaying component 116, and/or anothercomponent of gateway system 100 as described herein, can becommunicatively, electrically, and/or operatively coupled to one anothervia bus 112 to perform functions of gateway system 100, and any othercomponents coupled therewith. In several embodiments, bus 112 cancomprise one or more of a memory bus, memory controller, peripheral bus,external bus, local bus, or another type of bus that can employ variousbus architectures. Further examples of bus 112 are described below withreference to system bus 1008 and FIG. 10 . Such examples of bus 112 canbe employed to implement any embodiments of the subject disclosure.

In some embodiments, gateway system 100 can comprise any type ofcomponent, machine, device, facility, apparatus, and/or instrument thatcomprises a processor and/or can be capable of effective and/oroperative communication with a wired and/or wireless network. All suchembodiments are envisioned. For example, gateway system 100 can comprisea server device, a computing device, a general-purpose computer, aspecial-purpose computer, a quantum computing device (e.g., a quantumcomputer, a quantum processor, etc.), a tablet computing device, ahandheld device, a server class computing machine and/or database, alaptop computer, a notebook computer, a desktop computer, a cell phone,a smart phone, a consumer appliance and/or instrumentation, anindustrial and/or commercial device, a digital assistant, a multimediaInternet enabled phone, a multimedia players, and/or another type ofdevice.

In some embodiments, gateway system 100 can be coupled (e.g.,communicatively, electrically, operatively, etc.) to one or moreexternal systems, sources, and/or devices (e.g., computing devices,communication devices, etc.) via a data cable (e.g., coaxial cable,High-Definition Multimedia Interface (HDMI), recommended standard (RS)232, Ethernet cable, etc.). In some embodiments, gateway system 100 canbe coupled (e.g., communicatively, electrically, operatively, etc.) toone or more external systems, sources, and/or devices (e.g., computingdevices, communication devices, etc.) via network 180.

According to multiple embodiments, network 180 can comprise wired andwireless networks, including, but not limited to, a cellular network, awide area network (WAN) (e.g., the Internet) or a local area network(LAN). For example, gateway system 100 can communicate with one or moreexternal systems, sources, and/or devices, for instance, computingdevices (and vice versa) using virtually any desired wired or wirelesstechnology, including but not limited to: wireless fidelity (Wi-Fi),global system for mobile communications (GSM), universal mobiletelecommunications system (UMTS), worldwide interoperability formicrowave access (WiMAX), enhanced general packet radio service(enhanced GPRS), third generation partnership project (3GPP) long termevolution (LTE), third generation partnership project 2 (3GPP2) ultramobile broadband (UMB), high speed packet access (HSPA), Zigbee andother 802.XX wireless technologies and/or legacy telecommunicationtechnologies, BLUETOOTH®, Session Initiation Protocol (SIP), ZIGBEE®,RF4CE protocol, WirelessHART protocol, 6LoWPAN (IPv6 over Low powerWireless Area Networks), Z-Wave, an ANT, an ultra-wideband (UWB)standard protocol, and/or other proprietary and non-proprietarycommunication protocols. In such an example, gateway system 100 can thusinclude hardware (e.g., a central processing unit (CPU), a transceiver,a decoder), software (e.g., a set of threads, a set of processes,software in execution) or a combination of hardware and software thatfacilitates communicating information between gateway system 100 andexternal systems, sources, and/or devices (e.g., computing devices,communication devices, etc.).

According to multiple embodiments, gateway system 100 can comprise oneor more computer and/or machine readable, writable, and/or executablecomponents and/or instructions that, when executed by processor 160, canfacilitate performance of operations defined by such component(s) and/orinstruction(s). Further, in numerous embodiments, any componentassociated with gateway system 100, as described herein with or withoutreference to the various figures of the subject disclosure, can compriseone or more computer and/or machine readable, writable, and/orexecutable components and/or instructions that, when executed byprocessor 160, can facilitate performance of operations defined by suchcomponent(s) and/or instruction(s). For example, external networkcomponent 108, pattern searching component 112, relaying component 116,and any other components associated with gateway system 100 as disclosedherein (e.g., communicatively, electronically, and/or operativelycoupled with and/or employed by gateway system 100), can comprise suchcomputer and/or machine readable, writable, and/or executablecomponent(s) and/or instruction(s). Consequently, according to numerousembodiments, gateway system 100 and/or any components associatedtherewith as disclosed herein, can employ processor 160 to execute suchcomputer and/or machine readable, writable, and/or executablecomponent(s) and/or instruction(s) to facilitate performance of one ormore operations described herein with reference to gateway system 100and/or any such components associated therewith.

For example, in one or more embodiments, external network component 108can facilitate, by network device 150 comprising a processor 160,receiving a communication from originating device 110 for target device115 from network device 150 associated with a publicly accessiblenetwork, e.g., the Internet. After receipt by network device 150 (e.g.,by external network component 108) network device 150 can employcomparing, e.g., by employing pattern searching component 112, thereceived communication with a previously received communication fromoriginating device 110. In one or more embodiments, as discussed below,pattern searching component 112 can search for a pattern of activitythat can indicate that the communication should be subject to additionaloperations, discussed below. In one or more embodiments, in somecircumstances, sending, by relaying component 116 of gateway device 150,the communication to target device 115 based on the search for thepattern of activity.

In some embodiments, gateway system 100 can be associated with varioustechnologies. For example, gateway system 100 can be associated withclassical computing technologies, quantum computing technologies,classical reinforcement learning technologies, quantum reinforcementlearning technologies, classical artificial intelligence (AI) modeltechnologies, quantum AI model technologies, classical machine learning(ML) model technologies, quantum ML model technologies, cloud computingtechnologies, IoT technologies, and/or other technologies.

As used in this disclosure, in some embodiments, the terms “component,”“system” and the like are intended to refer to, or comprise, acomputer-related entity or an entity related to an operational apparatuswith one or more specific functionalities, where, for example, theentity can be either hardware, a combination of hardware and software,software, or software in execution. As an example, a component can be,but is not limited to being, a process running on a processor, aprocessor, an object, an executable, a thread of execution,computer-executable instructions, a program, and/or a computer. By wayof illustration and not limitation, both an application running on aserver and the server can be a component.

One or more components can reside within a process and/or thread ofexecution, and a component can be localized on one computer and/ordistributed between two or more computers. In addition, these componentscan execute from various computer readable media having various datastructures stored thereon. The components can communicate via localand/or remote processes such as in accordance with a signal having oneor more data packets (e.g., data from one component interacting withanother component in a local system, distributed system, and/or across anetwork such as the Internet with other systems via the signal). Asanother example, a component can be an apparatus with specificfunctionality provided by mechanical parts operated by electric orelectronic circuitry, which is operated by a software application orfirmware application executed by a processor, wherein the processor canbe internal or external to the apparatus and executes at least a part ofthe software or firmware application. As yet another example, acomponent can be an apparatus that provides specific functionalitythrough electronic components without mechanical parts, the electroniccomponents can comprise a processor therein to execute software orfirmware that confers at least in part the functionality of theelectronic components. While various components have been illustrated asseparate components, it will be appreciated that multiple components canbe implemented as a single component, or a single component can beimplemented as multiple components, without departing from exampleembodiments.

It should also be appreciated that the embodiments of the subjectdisclosure depicted in various figures disclosed herein are forillustration only, and as such, the architecture of such embodiments arenot limited to the systems, devices, and/or components depicted therein.For example, in some embodiments, network device 150 can furthercomprise various computer and/or computing-based elements describedherein with reference to operating environment 1000 and FIG. 10 . In oneor more embodiments, such computer and/or computing-based elements canbe used in connection with implementing one or more of the systems,devices, components, and/or computer-implemented operations shown anddescribed in connection with FIG. 1 or other figures disclosed herein.

FIG. 2 illustrates a block diagram of an example, non-limiting system200 that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein. Repetitive description oflike elements and/or processes employed in respective embodiments isomitted for sake of brevity.

In some embodiments, system 200 can comprise gateway system 100,internet 180, provider network backbone 290, originating devices 210A-B,access point 185, and target devices 215A-C. In this example, targetdevices 215A-C are wirelessly coupled to access point 185 by wirelessconnection 296, and access point is communicatively coupled to providernetwork backbone 290 and gateway system 100 by connection 252 to accesspoint name (APN) 250.

In one or more embodiments, an APN can be a unique identifier that canfacilitate connection (e.g., by target device 215A) to provider networkbackbone 290. In one or more embodiments, the APN can be the exit pointfrom the 3G or GPRS network into either the public Internet or a privatecustomer gateway. Considered in greater detail, in some implementations,APN 250 can be a configurable network identifier used by a mobile deviceto facilitate connecting to a GSM carrier. The carrier can use thisidentifier to determine what type of network connection should becreated. For example, given a connection through APN 250, an IPaddresses can be selected and assigned to the wireless, security methodscan be implemented for the connection, and a connection to a privatecustomer network can be facilitates. More specifically, APN 250 canidentify an IP Packet Data Network (PDN), that is selected forcommunication by a mobile data user.

In addition to identifying a PDN, APN 250 can also facilitateidentifying data access services provided by the PDN that can beassociated with a user account associated with a device, e.g., awireless application protocol (WAP) server service, multimedia messagingservice (MMS). In different implementations, APN 250 can be used in 3GPPdata access networks, e.g. general packet radio service (GPRS), EDGE,2G, 3G, 4G, 5G, and evolved packet core (EPC) networks. In 5Gimplementations, a logical network name similar to APN 250 can be termeda data network name (DNN), and this name can also be a logical name towhich a device can request connectivity. FIG. 2 depicts this use of APN250 as an identifier for to facilitate connections to provider networkbackbone 290 by overlaying APN 250 on a portion of provider networkbackbone 290.

With respect to one or more embodiments described herein, APN 250 canalso provide a logical name to which target device 215A can request aconnection to provider network backbone 290 via gateway system 100. Todepict this use of APN 250 by one or more embodiments, in FIG. 2 , APN250 is also depicted as overlaying a portion of gateway system 100.Thus, in one or more embodiments, by referencing APN 250, target devices215A-C can establish connectivity with provider network backbone 290with one or more of the protective features provided by gateway system100. As depicted in FIG. 2 , the positioning of gateway system 100between APN 250 and provider network backbone 290 can be termed acarrier network side implementation of gateway system 100. Inalternative embodiments depicted with FIG. 3 below, gateway system 100can be deployed between APN 250 and target devices 215A-C, with thisarrangement referred to as an edge deployment.

Returning to the example of FIG. 2 , in one or more embodiments, gatewaysystem 100 can receive network communications from originating devices210A-C via provider network backbone 290 and internet 180. Both providernetwork backbone 290 and gateway system 100 can provide communicationsfrom internet 180 to target devices 215A-C via APN 250 and access point185. Generally speaking, system 200 depicts traffic that originates withoriginating devices 210A-C, from internet 180, and ends withcommunications delivered to target devices 215A-C, e.g., as depicted bymobile terminated (MT) traffic 290 arrow.

In one or more embodiments of system 200, gateway system 100 can receivea communication for target device 210A from a network device (e.g.,gateway system 100), as a system associated with a publicly accessiblenetwork source, e.g., connected via provider network backbone 290 tointernet 180. It should further be noted that, in one or moreembodiments, a connection can be established between originating device210A and gateway device 100.

As described above, gateway system 100 can compare the communicationwith a previously received communication from the network deviceassociated with the publicly accessible network source to search for apattern of activity. In one or more embodiments, other sources ofarchived and real-time data can be analyzed in the pattern analysisperformed by pattern searching component 112 of gateway 100. Differentcombinations of data sources and analysis that can be used by one ormore embodiments as discussed in more detail below with

FIG. 4

In one or more embodiments, after the analysis above, gateway system 100can relay the communication to the target device 215A based on theresults of the analysis, e.g., communication determined to beappropriate to relay to target device 210A. As noted above as depictedin FIG. 2 , in this example, gateway system 100 is positioned betweenpublicly accessible internet 180 data sources and APN 250. In one ormore embodiments, sending the communication to the device comprisessending, via APN 250 the communication to a device from which the targetdevice receives the communication.

As noted above, IoT devices can provide an example of a type of devicethat can benefit from combinations of different features of one or moreembodiments. For example, many IoT devices are specifically designed forparticular functions, without many of the security functions associatedwith mobile devices and other network connected devices. Because ofthis, different embodiments described herein that can provide higherlevels of security can often be a useful security supplement for IoTdevices. Example security features discussed below include, as discussedwith FIG. 4 below, analysis over time of patterns of data including, butnot limited to, network traffic, operations by different types oforiginating devices 210A-C and target devices 215A-C. In addition, asdiscussed with FIG. 5 below, one or more embodiments can employartificial intelligence components to augment the pattern analysisoperations of other components. Machine learning concepts can alsoaugment the updating and improving of the results of embodiments overtime.

Other example characteristics of IoT devices that can be served by oneor more embodiments include the mobility profile of some IoT devices.For example, some approaches to network security differentiate betweenstationary devices and mobile devices, e.g., servers and userequipments, respectively, and one or more embodiments also can servethese devices. IoT devices can have, in some circumstances, mobilityprofiles with combinations of characteristics of both mainly stationaryand mainly mobile of devices.

As noted above IoT devices can often be adapted to specific functions,and access to these devices from publicly available networks can besought for a variety of purposes, including but not limited to, settingup and updating configuration information, changing the reportingfrequency of the device, and changing the data payload of the device.Different examples include changing a temperature setting for awirelessly connected thermostat, and changing triggering parameters ofwirelessly connected camera. Many of the access requirements ofdifferent IoT devices can require access from outside a protectednetwork, e.g., a publicly accessible IP address.

In another example of one or more embodiments described hereinaugmenting features of IoT devices, to facilitate control of an IoTdevice often the device will have a capability to present a userinterface for configuration. A web page for controlling and IoT devicecan be publicly available to the internet, with password authentication.In this example, the web page can, in some circumstances, not bedeployed with modem authentication technologies. In one or moreembodiments, by placing gateway system 100 between this web page and theinternet, gateway system 100 can provide additional levels ofauthentication, e.g., multi-factor authenticated access, including, butnot limited to, OAath 2.0, or similar authentication protocols, as wellas imposing time limits on authentication processes.

In another example of characteristics of IoT devices that can becomplemented with features of one or more embodiments, IoT devices oftenhave no encrypted communication capability, or older less secureencryption capabilities. In an operation similar to the supplementalauthentication for IoT devices described above, gateway service canprovide encryption and decryption services for communications passingthrough. It should be noted that the encryption functions that can beprovided by gateway 100 can be used to supplement existing securityfeatures of the IoT device. For example, one or more embodiments canprovide enhanced features that include, but are not limited to,expanding the length of encryption keys, providing new encryptionalgorithms, and providing enhanced versions of transport layer security(TLS).

In addition, in one or more embodiments, system 100 can also providemanagement and reporting features that can include, but are not limitedto, enabling features, disabling features, imposing data limits,geofencing, and more. Further to these administrative functions, itwould be appreciated by one having skill in the relevant art(s), giventhe description herein, that one or more embodiments can provide adevice management portal that can be used to modify many of thedifferent configuration settings described herein. This type ofself-service by IoT managers can be applied to individual devices, aswell as devices that can be grouped together into administrative groups.

FIG. 3 illustrates a block diagram of an example, non-limiting system300 that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein. Repetitive description oflike elements and/or processes employed in respective embodiments isomitted for sake of brevity. In some embodiments, system 300 cancomprise gateway system 100, APN 250, access point 185, and targetdevices 215A-C. APN 250 is depicted on a carrier side 395 for componentsand gateway system 100 is depicted as an edge side 396 component,deployed between access point 185 and APN 250.

As noted with the discussion of FIG. 2 above, in contrast to system 200of FIG. 2 , FIG. 3 depicts embodiments where gateway system 100 isdeployed on edge side 396, receiving communications from APN 250,analyzing the communications and sending the communications to targetdevices 215A-C if this action is selected. One type of networkcommunication that can benefit from this placement is a peer-to-peer(also termed edge-to-edge) communication, such as vehicle to vehicle(V2V) communication in NR configurations, e.g., for communications thatare relayed through APN 250, gateway system 100 can analyze thesemessages.

FIG. 4 illustrates a block diagram of an example, non-limiting system400 that can facilitate providing a gateway for publicly accessiblecommunications to reach devices via a wireless network, in accordancewith one or more embodiments described herein. Repetitive description oflike elements and/or processes employed in respective embodiments isomitted for sake of brevity.

In one or more embodiments, system 400 can include access patternsearching component 112, which can analyze data from differentcombinations of system data to identify anomalous conditions associatedwith communications, e.g., communications terminating with targetdevices 215A-C. Example data that can be analyzed by one or moreembodiments include, but are not limited to access control lists 440,data from network monitor 430, network activity logs 410, and targetdevice information logs 420.

Generally speaking, one or more embodiments can, over time develop apattern of activity for entities including, but not limited to,individual devices, types of devices, users, types of users, and othersimilar entities. Developed patterns can be updated according to usage,improvements in pattern development, for example. Once developed,gateway system can utilize different live and archival data sources toidentify anomalous activity.

Example data points that can be collected and used by one or moreembodiments to identify anomalous activity include, but are not limitedto, packet rates, packet sizes, frequency of transmissions, moving orstatic cell locations, inbound (e.g., MT) and outbound (e.g., mobileoriginated (MO)) access and usage patterns. In an example, a pattern ofuse for originating device 210A indicates that the device infrequentlyattempts access to the IoT device for reports or updating configurationsettings. When the usage activity for this the originating device 210Achanges to frequent access from a different IP address or a different IPaddress area, this could be highlighted as anomalous activity.

One having skill in the relevant art(s), given the description herein,would appreciate that other data sources, activities, parts of thenetwork, and other similar entities can also be used by one or moreembodiments. It should be noted that, FIG. 5 below discusses differentAI/ML components of one or more embodiments that can also be employedfor detecting anomalous activities and other functions.

FIG. 5 illustrates an implementation of an example 500 of non-limitingsystem 500 that can facilitate providing a gateway for publiclyaccessible communications to reach devices via a wireless network byemploying AI/ML components, in accordance with one or more embodimentsdescribed herein. Repetitive description of like elements employed inother embodiments described herein is omitted for sake of brevity. Asdepicted in FIG. 5 , system 500 can comprise artificial neural network(ANN) 570, and training data 510, and AI/ML component 573communicatively coupled to pattern searching component 112.

In certain embodiments, different functions of AI/ML can be facilitatedbased on classifications, correlations, inferences and/or expressionsassociated with principles of artificial intelligence. For example,AI/ML component 573 can employ expert systems, fuzzy logic, supportvector machines (SVMs), hidden Markov models (HMMs), greedy searchalgorithms, rule-based systems, Bayesian models (e.g., Bayesiannetworks), ANNs, other non-linear training techniques, data fusion,utility-based analytical systems, systems employing Bayesian models, andensemble ML algorithms/methods, including deep neural networks,reinforcement learning (RL), Bayesian Statistics, and long short-termmemory (LSTM) networks.

In an example AI/ML approach that can be utilized by one or moreembodiments, ANN 570 can be optimized (also termed “trained” herein) bysubmitting optimizing data (e.g., training data 510) to ANN 570, e.g.,network traffic data and other data used for identification ofcommunication anomalies, e.g., detected anomaly 530. It should be notedthat this description of employing ANN 570 is non-limiting, e.g., one ormore embodiments can use other types of machine learning algorithms thatreceive input and perform analysis. Another example implementation ofAI/ML components can employ a Bayes Network or Markov network that canmodel elements including, but not limited to, network elements and adistributed network of models. A network dependency graph could be builtthat models the network and physical and virtual or separate and thedependencies between graph nodes. One having skill in the relevantart(s), given the description herein, would appreciate other areas whereAI/ML component 573 can be employed by one or more embodiments.

As used herein, the term “neural network model” can refer to a computermodel that can be used to facilitate one or more machine learning tasks,wherein the computer model can simulate a number of interconnectedprocessing units that can resemble abstract versions of neurons. Forexample, the processing units can be arranged in a plurality of layers(e.g., one or more input layers, one or more hidden layers, and/or oneor more output layers) connected with by varying connection strengths(e.g., which can be commonly referred to within the art as “weights”).Neural network models can learn through training, wherein data withknown outcomes is inputted into the computer model, outputs regardingthe data are compared to the known outcomes, and/or the weights of thecomputer model are autonomous adjusted based on the comparison toreplicate the known outcomes. As used herein, the term “training data”can refer to data and/or data sets used to train one or more neuralnetwork models. As a neural network model trains (e.g., utilizes moretraining data), the computer model can become increasingly accurate;thus, trained neural network models can accurately analyze data withunknown outcomes, based on lessons learning from training data, tofacilitate one or more machine learning tasks.

FIG. 6 . illustrates an implementation of an example of non-limitingsystem 600 that can facilitate providing a gateway for publiclyaccessible communications to reach devices via a connectionless wirelessnetwork, in accordance with one or more embodiments described herein.Repetitive description of like elements employed in other embodimentsdescribed herein is omitted for sake of brevity. System 600 can includeuser plane functionalities (UPFs) 610A-C, access point 685, targetdevice 650, software-defined networking (SDN) controller, and internet180, in accordance with one or more embodiments. In one or moreembodiments, UPF 610A contains the gateway 100 component, and UPF 610Cis operated at access point 685.

In some implementations of one or more embodiments, to support largeamounts of IoT devices, instead of a connection-oriented architecturethat sets up a general packet radio service tunneling protocol (GTP)before any data path communications, one or more embodiments can beimplemented in a connectionless architecture using SDN principlescombined with IP-based direct user data packet forwarding. SDN can beused as a control plane protocol for packet forwarding configurations,and for flexible service edge configurations (e.g., via a segmentrouting header (SRH) configuration). In one or more embodiments, thisconnectionless architecture can be implemented at many levels, includingbut not limited to in both the RAN and Core.

Within a 5G core network, multiple UPFs can be concatenated (e.g., UPFs610A-C). At the mobile edge, a centralized user-user plane CU-UP can beintegrated with UPF 610A, wherein the UPF 610B and UPF 610C are morecentralized in the core network. In another scenario, within a 5Gnetwork, different slices can be used to accommodate the needs of avariety of types of devices, services and applications with dramaticallydifferent service delivery and mobility requirements (e.g., usedifferent network slices for connectionless vs. connection-orientedarchitecture).

In this implementation, SDN controller 690 can dynamically configure oneor more virtual network functions (VNFs) for packets to be relayed totarget device 615 from internet 180. In one or more embodiments, packetsarriving at gateway system 100 can have a segment routing headerappended to them, including routing information, and VNFs configured bySDN controller 690 to utilize functions of gateway system 100, e.g.,real-time network traffic analysis and various security functions. Forone or more embodiments, VNFs can be dynamically configured to beprovided by gateway system 100 to provide many of the services describedabove, e.g., encryption, access control lists, and other functions thatmay not be available in the IoT device. In an example, SDN controller690 configures an example V1 VNF for V1 for intrusion prevention anddetection system (IDS/IPS), and V2 for multi-factor access control.These codes can be added to the SRH for performance with certain packetsreceived.

FIG. 7 depicts a flow diagram representing example method 700, inaccordance with various aspects and implementations of the subjectdisclosure. It should be noted that, one or more aspects, (e.g.,implemented in a machine-readable storage medium, comprising executableinstructions that, when executed by a processor, facilitate performanceof operations) can be represented in FIG. 7 .

At 702, method 700 can comprise facilitating, by a gateway devicecomprising a processor, receiving a communication for a device from anetwork device associated with a publicly accessible network source. Forexample, in one or more embodiments, method 700 can comprisefacilitating, by gateway system 100 comprising processor 160, receivinga communication for target device 215A from originating device 210Aassociated with internet 180.

At 704, method 700 can comprise facilitating comparing, by patternsearching component 112 of the gateway device, the communication with apreviously received communication from the network device associatedwith the publicly accessible network source to search for a pattern ofactivity. For example, in one or more embodiments, method 700 cancomprise facilitating comparing, by the gateway device, thecommunication with a previously received communication (e.g., retrievefrom network activity logs 410) from originating device 210A associatedwith the publicly accessible network source to search for a pattern ofactivity. At 706, method 700 can comprise facilitating sending, by thegateway device, the communication to the device based on the search forthe pattern of activity. For example, in one or more embodiments, method700 can comprise facilitating sending, by the gateway device, thecommunication to target device 215A based on the search for the patternof activity.

FIG. 8 is a schematic block diagram of a computing environment 800 withwhich the disclosed subject matter can interact. The system 800comprises one or more remote component(s) 810. The remote component(s)810 can be hardware and/or software (e.g., threads, processes, computingdevices). One possible communication between a remote component(s) 810and a local component(s) 820 can be in the form of a data packet adaptedto be transmitted between two or more computer processes. Anotherpossible communication between a remote component(s) 810 and a localcomponent(s) 820 can be in the form of circuit-switched data adapted tobe transmitted between two or more computer processes in radio timeslots. The system 800 comprises a communication framework 890 that canbe employed to facilitate communications between the remote component(s)810 and the local component(s) 820, and can comprise an air interface,e.g., Uu interface of a UMTS network, via a long-term evolution (LTE)network, via a 5G network, etc. Remote component(s) 810 can be operablyconnected to one or more remote data store(s) 850, such as a hard drive,solid state drive, SIM card, device memory, etc., that can be employedto store information on the remote component(s) 810 side ofcommunication framework 890.

In order to provide a context for the various aspects of the disclosedsubject matter, FIGS. 9 and 10 , and the following discussion, areintended to provide a brief, general description of a suitableenvironment in which the various aspects of the disclosed subject mattercan be implemented. While the subject matter has been described above inthe general context of computer-executable instructions of a computerprogram that runs on a computer and/or computers, those skilled in theart will recognize that the disclosed subject matter also can beimplemented in combination with other program modules. Generally,program modules comprise routines, programs, components, datastructures, etc. that performs particular tasks and/or implementparticular abstract data types.

In the subject specification, terms such as “store,” “storage,” “datastore,” data storage,” “database,” and substantially any otherinformation storage component relevant to operation and functionality ofa component, refer to “memory components,” or entities embodied in a“memory” or components comprising the memory. It is noted that thememory components described herein can be either volatile memory ornonvolatile memory, or can comprise both volatile and nonvolatilememory, by way of illustration, and not limitation, volatile memory 1020(see below), non-volatile memory 1022 (see below), disk storage 1024(see below), and memory storage 1046 (see below). Further, nonvolatilememory can be included in read only memory, programmable read onlymemory, electrically programmable read only memory, electricallyerasable read only memory, or flash memory. Volatile memory can compriserandom access memory, which acts as external cache memory. By way ofillustration and not limitation, random access memory is available inmany forms such as synchronous random access memory , dynamic randomaccess memory, synchronous dynamic random access memory, double datarate synchronous dynamic random access memory, enhanced synchronousdynamic random access memory, SynchLink dynamic random access memory,and direct Rambus random access memory. Additionally, the disclosedmemory components of systems or methods herein are intended to comprise,without being limited to comprising, these and any other suitable typesof memory.

Moreover, it is noted that the disclosed subject matter can be practicedwith other computer system configurations, comprising single-processoror multiprocessor computer systems, mini-computing devices, mainframecomputers, as well as personal computers, hand-held computing devices(e.g., personal digital assistant, phone, watch, tablet computers,netbook computers, ...), microprocessor-based or programmable consumeror industrial electronics, and the like. The illustrated aspects canalso be practiced in distributed computing environments where tasks areperformed by remote processing devices that are linked through acommunications network; however, some if not all aspects of the subjectdisclosure can be practiced on stand-alone computers. In a distributedcomputing environment, program modules can be located in both local andremote memory storage devices.

FIG. 9 is an example block diagram of an example mobile handset 900operable to engage in a system architecture that facilitates wirelesscommunications according to one or more embodiments described herein.Mobile handset 900 is one example target device 210A-C illustrated inFIG. 1 . Although a mobile handset is illustrated herein, it will beunderstood that other devices can be a mobile device, and that themobile handset is merely illustrated to provide context for theembodiments of the various embodiments described herein. The followingdiscussion is intended to provide a brief, general description of anexample of a suitable environment in which the various embodiments canbe implemented. While the description includes a general context ofcomputer-executable instructions embodied on a machine-readable storagemedium, those skilled in the art will recognize that the innovation alsocan be implemented in combination with other program modules and/or as acombination of hardware and software.

Generally, applications (e.g., program modules) can include routines,programs, components, data structures, etc., that perform particulartasks or implement particular abstract data types. Moreover, thoseskilled in the art will appreciate that the methods described herein canbe practiced with other system configurations, includingsingle-processor or multiprocessor systems, minicomputers, mainframecomputers, as well as personal computers, hand-held computing devices,microprocessor-based or programmable consumer electronics, and the like,each of which can be operatively coupled to one or more associateddevices.

A computing device can typically include a variety of machine-readablemedia. Machine-readable media can be any available media that can beaccessed by the computer and includes both volatile and non-volatilemedia, removable and non-removable media. By way of example and notlimitation, computer-readable media can comprise computer storage mediaand communication media. Computer storage media can include volatileand/or non-volatile media, removable and/or non-removable mediaimplemented in any method or technology for storage of information, suchas computer-readable instructions, data structures, program modules, orother data. Computer storage media can include, but is not limited to,RAM, ROM, EEPROM, flash memory or other memory technology, CD ROM,digital video disk (DVD) or other optical disk storage, magneticcassettes, magnetic tape, magnetic disk storage or other magneticstorage devices, or any other medium which can be used to store thedesired information and which can be accessed by the computer.

Communication media typically embodies computer-readable instructions,data structures, program modules, or other data in a modulated datasignal such as a carrier wave or other transport mechanism, and includesany information delivery media. The term “modulated data signal” means asignal that has one or more of its characteristics set or changed insuch a manner as to encode information in the signal. By way of example,and not limitation, communication media includes wired media such as awired network or direct-wired connection, and wireless media such asacoustic, RF, infrared and other wireless media. Combinations of the anyof the above should also be included within the scope ofcomputer-readable media.

The handset includes a processor 902 for controlling and processing allonboard operations and functions. A memory 904 interfaces to theprocessor 902 for storage of data and one or more applications 906(e.g., a video player software, user feedback component software, etc.).Other applications can include voice recognition of predetermined voicecommands that facilitate initiation of the user feedback signals. Theapplications 906 can be stored in the memory 904 and/or in a firmware908, and executed by the processor 902 from either or both the memory904 or/and the firmware 908. The firmware 908 can also store startupcode for execution in initializing the handset 900. A communicationscomponent 910 interfaces to the processor 902 to facilitatewired/wireless communication with external systems, e.g., cellularnetworks, VoIP networks, and so on. Here, the communications component910 can also include a suitable cellular transceiver 911 (e.g., a GSMtransceiver) and/or an unlicensed transceiver 913 (e.g., Wi-Fi, WiMax)for corresponding signal communications. The handset 900 can be a devicesuch as a cellular telephone, a PDA with mobile communicationscapabilities, and messaging-centric devices. The communicationscomponent 910 also facilitates communications reception from terrestrialradio networks (e.g., broadcast), digital satellite radio networks, andInternet-based radio services networks.

The handset 900 includes a display 912 for displaying text, images,video, telephony functions (e.g., a Caller ID function), setupfunctions, and for user input. For example, the display 912 can also bereferred to as a “screen” that can accommodate the presentation ofmultimedia content (e.g., music metadata, messages, wallpaper, graphics,etc.). The display 912 can also display videos and can facilitate thegeneration, editing and sharing of video quotes. A serial I/O interface914 is provided in communication with the processor 902 to facilitatewired and/or wireless serial communications (e.g., USB, and/or IEEE1394) through a hardwire connection, and other serial input devices(e.g., a keyboard, keypad, and mouse). This can support updating andtroubleshooting the handset 900, for example. Audio capabilities areprovided with an audio I/O component 916, which can include a speakerfor the output of audio signals related to, for example, indication thatthe user pressed the proper key or key combination to initiate the userfeedback signal. The audio I/O component 916 also facilitates the inputof audio signals through a microphone to record data and/or telephonyvoice data, and for inputting voice signals for telephone conversations.

The handset 900 can include a slot interface 918 for accommodating a SIC(Subscriber Identity Component) in the form factor of a card SubscriberIdentity Module (SIM) or universal SIM 920, and interfacing the SIM card920 with the processor 902. However, it is to be appreciated that theSIM card 920 can be manufactured into the handset 900, and updated bydownloading data and software.

The handset 900 can process IP data traffic through the communicationscomponent 910 to accommodate IP traffic from an IP network such as, forexample, the Internet, a corporate intranet, a home network, a personarea network, etc., through an ISP or broadband cable provider. Thus,VoIP traffic can be utilized by the handset 900 and IP-based multimediacontent can be received in either an encoded or decoded format.

A video processing component 922 (e.g., a camera) can be provided fordecoding encoded multimedia content. The video processing component 922can aid in facilitating the generation, editing, and sharing of videoquotes. The handset 900 also includes a power source 924 in the form ofbatteries and/or an AC power subsystem, which power source 924 caninterface to an external power system or charging equipment (not shown)by a power I/O component 926.

The handset 900 can also include a video component 930 for processingvideo content received and, for recording and transmitting videocontent. For example, the video component 930 can facilitate thegeneration, editing and sharing of video quotes. A location trackingcomponent 932 facilitates geographically locating the handset 900. Asdescribed hereinabove, this can occur when the user initiates thefeedback signal automatically or manually. A user input component 934facilitates the user initiating the quality feedback signal. The userinput component 934 can also facilitate the generation, editing andsharing of video quotes. The user input component 934 can include suchconventional input device technologies such as a keypad, keyboard,mouse, stylus pen, and/or touchscreen, for example.

Referring again to the applications 906, a hysteresis component 936facilitates the analysis and processing of hysteresis data, which isutilized to determine when to associate with the access point. Asoftware trigger component 938 can be provided that facilitatestriggering of the hysteresis component 936 when the Wi-Fi transceiver913 detects the beacon of the access point. A SIP client 940 enables thehandset 900 to support SIP protocols and register the subscriber withthe SIP registrar server. The applications 906 can also include a client942 that provides at least the capability of discovery, play and storeof multimedia content, for example, music.

The handset 900, as indicated above related to the communicationscomponent 910, includes an indoor network radio transceiver 913 (e.g.,Wi-Fi transceiver). This function supports the indoor radio link, suchas IEEE 802.11, for the dual-mode GSM handset 900. The handset 900 canaccommodate at least satellite radio services through a handset that cancombine wireless voice and digital radio chipsets into a single handhelddevice.

In various embodiments, the system 100 can be configured to provide andemploy 5G wireless networking features and functionalities. With 5Gnetworks that may use waveforms that split the bandwidth into severalsub bands, different types of services can be accommodated in differentsub bands with the most suitable waveform and numerology, leading toimproved spectrum utilization for 5G networks. Notwithstanding, in themmWave spectrum, the millimeter waves have shorter wavelengths relativeto other communications waves, whereby mmWave signals can experiencesevere path loss, penetration loss, and fading. However, the shorterwavelength at mmWave frequencies also allows more antennas to be packedin the same physical dimension, which allows for large-scale spatialmultiplexing and highly directional beamforming.

In order to provide additional context for various embodiments describedherein, FIG. 10 and the following discussion are intended to provide abrief, general description of a suitable computing environment 1000 inwhich the various embodiments of the embodiment described herein can beimplemented. While the embodiments have been described above in thegeneral context of computer-executable instructions that can run on oneor more computers, those skilled in the art will recognize that theembodiments can be also implemented in combination with other programmodules and/or as a combination of hardware and software.

Generally, program modules include routines, programs, components, datastructures, etc., that perform particular tasks or implement particularabstract data types. Moreover, those skilled in the art will appreciatethat the methods can be practiced with other computer systemconfigurations, including single-processor or multiprocessor computersystems, minicomputers, mainframe computers, Internet of Things (IoT)devices, distributed computing systems, as well as personal computers,hand-held computing devices, microprocessor-based or programmableconsumer electronics, and the like, each of which can be operativelycoupled to one or more associated devices.

The illustrated embodiments of the embodiments herein can be alsopracticed in distributed computing environments where certain tasks areperformed by remote processing devices that are linked through acommunications network. In a distributed computing environment, programmodules can be located in both local and remote memory storage devices.

Computing devices typically include a variety of media, which caninclude computer-readable storage media, machine-readable storage media,and/or communications media, which two terms are used herein differentlyfrom one another as follows. Computer-readable storage media ormachine-readable storage media can be any available storage media thatcan be accessed by the computer and includes both volatile andnonvolatile media, removable and non-removable media. By way of example,and not limitation, computer-readable storage media or machine-readablestorage media can be implemented in connection with any method ortechnology for storage of information such as computer-readable ormachine-readable instructions, program modules, structured data orunstructured data.

Computer-readable storage media can include, but are not limited to,random access memory (RAM), read only memory (ROM), electricallyerasable programmable read only memory (EEPROM), flash memory or othermemory technology, compact disk read only memory (CD ROM), digitalversatile disk (DVD), Blu-ray disc (BD) or other optical disk storage,magnetic cassettes, magnetic tape, magnetic disk storage or othermagnetic storage devices, solid state drives or other solid statestorage devices, or other tangible and/or non-transitory media which canbe used to store desired information. In this regard, the terms“tangible” or “non-transitory” herein as applied to storage, memory orcomputer-readable media, are to be understood to exclude onlypropagating transitory signals per se as modifiers and do not relinquishrights to all standard storage, memory or computer-readable media thatare not only propagating transitory signals per se.

Computer-readable storage media can be accessed by one or more local orremote computing devices, e.g., via access requests, queries or otherdata retrieval protocols, for a variety of operations with respect tothe information stored by the medium.

Communications media typically embody computer-readable instructions,data structures, program modules or other structured or unstructureddata in a data signal such as a modulated data signal, e.g., a carrierwave or other transport mechanism, and includes any information deliveryor transport media. The term “modulated data signal” or signals refersto a signal that has one or more of its characteristics set or changedin such a manner as to encode information in one or more signals. By wayof example, and not limitation, communication media include wired media,such as a wired network or direct-wired connection, and wireless mediasuch as acoustic, RF, infrared and other wireless media.

With reference again to FIG. 10 , the example environment 1000 forimplementing various embodiments of the aspects described hereinincludes a computer 1002, the computer 1002 including a processing unit1004, a system memory 1006 and a system bus 1008. The system bus 1008couples system components including, but not limited to, the systemmemory 1006 to the processing unit 1004. The processing unit 1004 can beany of various commercially available processors. Dual microprocessorsand other multi-processor architectures can also be employed as theprocessing unit 1004.

The system bus 1008 can be any of several types of bus structure thatcan further interconnect to a memory bus (with or without a memorycontroller), a peripheral bus, and a local bus using any of a variety ofcommercially available bus architectures. The system memory 1006includes ROM 1010 and RAM 1012. A basic input/output system (BIOS) canbe stored in a non-volatile memory such as ROM, erasable programmableread only memory (EPROM), EEPROM, which BIOS contains the basic routinesthat help to transfer information between elements within the computer1002, such as during startup. The RAM 1012 can also include a high-speedRAM such as static RAM for caching data.

The computer 1002 further includes an internal hard disk drive (HDD)1014 (e.g., EIDE, SATA), one or more external storage devices 1016(e.g., a magnetic floppy disk drive (FDD) 1016, a memory stick or flashdrive reader, a memory card reader, etc.) and an optical disk drive 1020(e.g., which can read or write from a CD-ROM disc, a DVD, a BD, etc.).While the internal HDD 1014 is illustrated as located within thecomputer 1002, the internal HDD 1014 can also be configured for externaluse in a suitable chassis (not shown). Additionally, while not shown inenvironment 1000, a solid state drive (SSD) could be used in additionto, or in place of, an HDD 1014. The HDD 1014, external storagedevice(s) 1016 and optical disk drive 1020 can be connected to thesystem bus 1008 by an HDD interface 1024, an external storage interface1026 and an optical drive interface 1028, respectively. The interface1024 for external drive implementations can include at least one or bothof Universal Serial Bus (USB) and Institute of Electrical andElectronics Engineers (IEEE) 1394 interface technologies. Other externaldrive connection technologies are within contemplation of theembodiments described herein.

The drives and their associated computer-readable storage media providenonvolatile storage of data, data structures, computer-executableinstructions, and so forth. For the computer 1002, the drives andstorage media accommodate the storage of any data in a suitable digitalformat. Although the description of computer-readable storage mediaabove refers to respective types of storage devices, it should beappreciated by those skilled in the art that other types of storagemedia which are readable by a computer, whether presently existing ordeveloped in the future, could also be used in the example operatingenvironment, and further, that any such storage media can containcomputer-executable instructions for performing the methods describedherein.

A number of program modules can be stored in the drives and RAM 1012,including an operating system 1030, one or more application programs1032, other program modules 1034 and program data 1036. All or portionsof the operating system, applications, modules, and/or data can also becached in the RAM 1012. The systems and methods described herein can beimplemented utilizing various commercially available operating systemsor combinations of operating systems.

Computer 1002 can optionally comprise emulation technologies. Forexample, a hypervisor (not shown) or other intermediary can emulate ahardware environment for operating system 1030, and the emulatedhardware can optionally be different from the hardware illustrated inFIG. 10 . In such an embodiment, operating system 1030 can comprise onevirtual machine (VM) of multiple VMs hosted at computer 1002.Furthermore, operating system 1030 can provide runtime environments,such as the Java runtime environment or the .NET framework, forapplications 1032. Runtime environments are consistent executionenvironments that allow applications 1032 to run on any operating systemthat includes the runtime environment. Similarly, operating system 1030can support containers, and applications 1032 can be in the form ofcontainers, which are lightweight, standalone, executable packages ofsoftware that include, e.g., code, runtime, system tools, systemlibraries and settings for an application.

Further, computer 1002 can be enable with a security module, such as atrusted processing module (TPM). For instance, with a TPM, bootcomponents hash next in time boot components, and wait for a match ofresults to secured values, before loading a next boot component. Thisprocess can take place at any layer in the code execution stack ofcomputer 1002, e.g., applied at the application execution level or atthe operating system (OS) kernel level, thereby enabling security at anylevel of code execution.

A user can enter commands and information into the computer 1002 throughone or more wired/wireless input devices, e.g., a keyboard 1038, a touchscreen 1040, and a pointing device, such as a mouse 1042. Other inputdevices (not shown) can include a microphone, an infrared (IR) remotecontrol, a radio frequency (RF) remote control, or other remote control,a joystick, a virtual reality controller and/or virtual reality headset,a game pad, a stylus pen, an image input device, e.g., camera(s), agesture sensor input device, a vision movement sensor input device, anemotion or facial detection device, a biometric input device, e.g.,fingerprint or iris scanner, or the like. These and other input devicesare often connected to the processing unit 1004 through an input deviceinterface 1044 that can be coupled to the system bus 1008, but can beconnected by other interfaces, such as a parallel port, an IEEE 1394serial port, a game port, a USB port, an IR interface, a BLUETOOTH®interface, etc.

A monitor 1046 or other type of display device can be also connected tothe system bus 1008 via an interface, such as a video adapter 1048. Inaddition to the monitor 1046, a computer typically includes otherperipheral output devices (not shown), such as speakers, printers, etc.

The computer 1002 can operate in a networked environment using logicalconnections via wired and/or wireless communications to one or moreremote computers, such as a remote computer(s) 1050. The remotecomputer(s) 1050 can be a workstation, a server computer, a router, apersonal computer, portable computer, microprocessor-based entertainmentappliance, a peer device or other common network node, and typicallyincludes many or all of the elements described relative to the computer1002, although, for purposes of brevity, only a memory/storage device1052 is illustrated. The logical connections depicted includewired/wireless connectivity to a local area network (LAN) 1054 and/orlarger networks, e.g., a wide area network (WAN) 1056. Such LAN and WANnetworking environments are commonplace in offices and companies, andfacilitate enterprise-wide computer networks, such as intranets, all ofwhich can connect to a global communications network, e.g., theInternet.

When used in a LAN networking environment, the computer 1002 can beconnected to the local network 1054 through a wired and/or wirelesscommunication network interface or adapter 1058. The adapter 1058 canfacilitate wired or wireless communication to the LAN 1054, which canalso include a wireless access point (AP) disposed thereon forcommunicating with the adapter 1058 in a wireless mode.

When used in a WAN networking environment, the computer 1002 can includea modem 1060 or can be connected to a communications server on the WAN1056 via other means for establishing communications over the WAN 1056,such as by way of the Internet. The modem 1060, which can be internal orexternal and a wired or wireless device, can be connected to the systembus 1008 via the input device interface 1044. In a networkedenvironment, program modules depicted relative to the computer 1002 orportions thereof, can be stored in the remote memory/storage device1052. It will be appreciated that the network connections shown areexample and other means of establishing a communications link betweenthe computers can be used.

When used in either a LAN or WAN networking environment, the computer1002 can access cloud storage systems or other network-based storagesystems in addition to, or in place of, external storage devices 1016 asdescribed above. Generally, a connection between the computer 1002 and acloud storage system can be established over a LAN 1054 or WAN 1056e.g., by the adapter 1058 or modem 1060, respectively. Upon connectingthe computer 1002 to an associated cloud storage system, the externalstorage interface 1026 can, with the aid of the adapter 1058 and/ormodem 1060, manage storage provided by the cloud storage system as itwould other types of external storage. For instance, the externalstorage interface 1026 can be configured to provide access to cloudstorage sources as if those sources were physically connected to thecomputer 1002.

The computer 1002 can be operable to communicate with any wirelessdevices or entities operatively disposed in wireless communication,e.g., a printer, scanner, desktop and/or portable computer, portabledata assistant, communications satellite, any piece of equipment orlocation associated with a wirelessly detectable tag (e.g., a kiosk,news stand, store shelf, etc.), and telephone. This can include WirelessFidelity (Wi-Fi) and BLUETOOTH® wireless technologies. Thus, thecommunication can be a predefined structure as with a conventionalnetwork or simply an ad hoc communication between at least two devices.

The above description of illustrated embodiments of the subjectdisclosure, including what is described in the Abstract, is not intendedto be exhaustive or to limit the disclosed embodiments to the preciseforms disclosed. While specific embodiments and examples are describedherein for illustrative purposes, various modifications are possiblethat are considered within the scope of such embodiments and examples,as those skilled in the relevant art can recognize.

In this regard, while the disclosed subject matter has been described inconnection with various embodiments and corresponding Figures, whereapplicable, it is to be understood that other similar embodiments can beused or modifications and additions can be made to the describedembodiments for performing the same, similar, alternative, or substitutefunction of the disclosed subject matter without deviating therefrom.Therefore, the disclosed subject matter should not be limited to anysingle embodiment described herein, but rather should be construed inbreadth and scope in accordance with the appended claims below.

As it employed in the subject specification, the term “processor” canrefer to substantially any computing processing unit or devicecomprising, but not limited to comprising, single-core processors;single-processors with software multithread execution capability;multi-core processors; multi-core processors with software multithreadexecution capability; multi-core processors with hardware multithreadtechnology; parallel platforms; and parallel platforms with distributedshared memory. Additionally, a processor can refer to an integratedcircuit, an application specific integrated circuit (ASIC), a digitalsignal processor (DSP), a field programmable gate array (FPGA), aprogrammable logic controller (PLC), a complex programmable logic device(CPLD), a discrete gate or transistor logic, discrete hardwarecomponents, or any combination thereof designed to perform the functionsdescribed herein. Processors can exploit nano-scale architectures suchas, but not limited to, molecular and quantum-dot based transistors,switches and gates, in order to optimize space usage or enhanceperformance of user equipment. A processor may also be implemented as acombination of computing processing units.

In the subject specification, terms such as “store,” “storage,” “datastore,” data storage,” “database,” and substantially any otherinformation storage component relevant to operation and functionality ofa component, refer to “memory components,” or entities embodied in a“memory” or components comprising the memory. It will be appreciatedthat the memory components described herein can be either volatilememory or nonvolatile memory, or can include both volatile andnonvolatile memory.

As used in this application, the terms “component,” “system,”“platform,” “layer,” “selector,” “interface,” and the like are intendedto refer to a computer-related entity or an entity related to anoperational apparatus with one or more specific functionalities, whereinthe entity can be either hardware, a combination of hardware andsoftware, software, or software in execution. As an example, a componentmay be, but is not limited to being, a process running on a processor, aprocessor, an object, an executable, a thread of execution, a program,and/or a computer. By way of illustration and not limitation, both anapplication running on a server and the server can be a component. Oneor more components may reside within a process and/or thread ofexecution and a component may be localized on one computer and/ordistributed between two or more computers. In addition, these componentscan execute from various computer readable media, device readablestorage devices, or machine readable media having various datastructures stored thereon. The components may communicate via localand/or remote processes such as in accordance with a signal having oneor more data packets (e.g., data from one component interacting withanother component in a local system, distributed system, and/or across anetwork such as the Internet with other systems via the signal). Asanother example, a component can be an apparatus with specificfunctionality provided by mechanical parts operated by electric orelectronic circuitry, which is operated by a software or firmwareapplication executed by a processor, wherein the processor can beinternal or external to the apparatus and executes at least a part ofthe software or firmware application. As yet another example, acomponent can be an apparatus that provides specific functionalitythrough electronic components without mechanical parts, the electroniccomponents can include a processor therein to execute software orfirmware that confers at least in part the functionality of theelectronic components.

In addition, the term “or” is intended to mean an inclusive “or” ratherthan an exclusive “or.” That is, unless specified otherwise, or clearfrom context, “X employs A or B” is intended to mean any of the naturalinclusive permutations. That is, if X employs A; X employs B; or Xemploys both A and B, then “X employs A or B” is satisfied under any ofthe foregoing instances. Moreover, articles “a” and “an” as used in thesubject specification and annexed drawings should generally be construedto mean “one or more” unless specified otherwise or clear from contextto be directed to a singular form.

Moreover, terms like “user equipment (UE),” “mobile station,” “mobile,”subscriber station,” “subscriber equipment,” “access terminal,”“terminal,” “handset,” and similar terminology, refer to a wirelessdevice utilized by a subscriber or user of a wireless communicationservice to receive or convey data, control, voice, video, sound, gaming,or substantially any data-stream or signaling-stream. The foregoingterms are utilized interchangeably in the subject specification andrelated drawings. Likewise, the terms “access point (AP),” “basestation,” “NodeB,” “evolved Node B (eNodeB),” “home Node B (HNB),” “homeaccess point (HAP),” “cell device,” “sector,” “cell,” and the like, areutilized interchangeably in the subject application, and refer to awireless network component or appliance that serves and receives data,control, voice, video, sound, gaming, or substantially any data-streamor signaling-stream to and from a set of subscriber stations or providerenabled devices. Data and signaling streams can include packetized orframe-based flows.

Additionally, the terms “core-network”, “core”, “core carrier network”,“carrier-side”, or similar terms can refer to components of atelecommunications network that typically provides some or all ofaggregation, authentication, call control and switching, charging,service invocation, or gateways. Aggregation can refer to the highestlevel of aggregation in a service provider network wherein the nextlevel in the hierarchy under the core nodes is the distribution networksand then the edge networks. User equipments do not normally connectdirectly to the core networks of a large service provider but can berouted to the core by way of a switch or radio area network.Authentication can refer to determinations regarding whether the userrequesting a service from the telecom network is authorized to do sowithin this network or not. Call control and switching can referdeterminations related to the future course of a call stream acrosscarrier equipment based on the call signal processing. Charging can berelated to the collation and processing of charging data generated byvarious network nodes. Two common types of charging mechanisms found inpresent day networks can be prepaid charging and postpaid charging.Service invocation can occur based on some explicit action (e.g. calltransfer) or implicitly (e.g., call waiting). It is to be noted thatservice “execution” may or may not be a core network functionality asthird party network/nodes may take part in actual service execution. Agateway can be present in the core network to access other networks.Gateway functionality can be dependent on the type of the interface withanother network.

Furthermore, the terms “user,” “subscriber,” “customer,” “consumer,”“prosumer,” “agent,” and the like are employed interchangeablythroughout the subject specification, unless context warrants particulardistinction(s) among the terms. It should be appreciated that such termscan refer to human entities or automated components (e.g., supportedthrough artificial intelligence, as through a capacity to makeinferences based on complex mathematical formalisms), that can providesimulated vision, sound recognition and so forth.

Aspects, features, or advantages of the subject matter can be exploitedin substantially any, or any, wired, broadcast, wirelesstelecommunication, radio technology or network, or combinations thereof.Non-limiting examples of such technologies or networks include Geocasttechnology; broadcast technologies (e.g., sub-Hz, ELF, VLF, LF, MF, HF,VHF, UHF, SHF, THz broadcasts, etc.); Ethernet; X.25; powerline-typenetworking (e.g., PowerLine AV Ethernet, etc.); femto-cell technology;Wi-Fi; Worldwide Interoperability for Microwave Access (WiMAX); EnhancedGeneral Packet Radio Service (Enhanced GPRS); Third GenerationPartnership Project (3GPP or 3G) Long Term Evolution (LTE); 3GPPUniversal Mobile Telecommunications System (UMTS) or 3GPP UMTS; ThirdGeneration Partnership Project 2 (3GPP2) Ultra Mobile Broadband (UMB);High Speed Packet Access (HSPA); High Speed Downlink Packet Access(HSDPA); High Speed Uplink Packet Access (HSUPA); GSM Enhanced DataRates for GSM Evolution (EDGE) Radio Access Network (RAN) or GERAN; UMTSTerrestrial Radio Access Network (UTRAN); or LTE Advanced.

What has been described above includes examples of systems and methodsillustrative of the disclosed subject matter. It is, of course, notpossible to describe every combination of components or methods herein.One of ordinary skill in the art may recognize that many furthercombinations and permutations of the disclosure are possible.Furthermore, to the extent that the terms “includes,” “has,”“possesses,” and the like are used in the detailed description, claims,appendices and drawings such terms are intended to be inclusive in amanner similar to the term “comprising” as “comprising” is interpretedwhen employed as a transitional word in a claim.

While the various embodiments are susceptible to various modificationsand alternative constructions, certain illustrated implementationsthereof are shown in the drawings and have been described above indetail. It should be understood, however, that there is no intention tolimit the various embodiments to the specific forms disclosed, but onthe contrary, the intention is to cover all modifications, alternativeconstructions, and equivalents falling within the spirit and scope ofthe various embodiments.

In addition to the various implementations described herein, it is to beunderstood that other similar implementations can be used, ormodifications and additions can be made to the describedimplementation(s) for performing the same or equivalent function of thecorresponding implementation(s) without deviating therefrom. Stillfurther, multiple processing chips or multiple devices can share theperformance of one or more functions described herein, and similarly,storage can be effected across a plurality of devices. Accordingly, theembodiments are not to be limited to any single implementation, butrather are to be construed in breadth, spirit and scope in accordancewith the appended claims.

What is claimed is:
 1. A method, comprising: facilitating, by a firstnetwork device comprising a processor, receiving, from a second networkdevice, data that has been wirelessly communicated via a third networkdevice, wherein the data has been compared to a template of anomalousactivity applicable to determine an anomalous characteristic of atransmission of the data, and wherein the data comprises operation dataindicative of operations performed by the third network device;facilitating, by the first network device, receiving an indication thatthe second network device provided a function to the third networkdevice; and supplementing, by the first network device, capabilities ofthe third network device, resulting in supplemented capabilities,wherein the supplemented capabilities comprise a capability toauthenticate for access to settings of the third network device.
 2. Themethod of claim 1, wherein the facilitating of the receiving of the datacomprises receiving the data from the second network device via anaccess point device name.
 3. The method of claim 1, wherein the secondnetwork device received the data using an access point device name of apublicly accessible network that was sent from the third network device.4. The method of claim 1, wherein the data comprises a mobile terminatedmessage.
 5. The method of claim 1, wherein the data has been previouslycompared to the template of anomalous activity by applying a neuralnetwork that has been trained based on communications involving thesecond network device.
 6. The method of claim 1, wherein the anomalouscharacteristic comprises an anomalous packet characteristic.
 7. Themethod of claim 1, wherein the anomalous characteristic comprises ananomalous frequency of transmissions comprising the transmission of thedata.
 8. The method of claim 1, further comprising, facilitating, by thefirst network device, receiving encrypted data from the second networkdevice, and wherein the second network device encrypted the data,resulting in the encrypted data, based on a determination that the thirdnetwork device does not comprise components to encrypt the data. 9.Gateway equipment, comprising: a processor; and a memory that storesexecutable instructions that, when executed by the processor, facilitateperformance of operations, comprising: receiving a communication that isdirected to first network equipment from second network equipmentassociated with a publicly accessible network source; identifyingfunctions that the first network equipment is capable of performing;comparing content of the communication with previous content of apreviously received communication from the second network equipment aspart of a search for a pattern of activity applicable to determine ananomalous characteristic of a transmission of the communication, whereinthe content comprises operation content representative of operationsperformed by the second network equipment related to the communication;sending the communication to the first network equipment based on thesearch for the pattern of activity; and based on a supplementing offunctions the first network equipment is capable of performing, enablingan additional function for the first network equipment other than thefunctions, wherein the additional function enabled for the first networkequipment comprises an authentication for access, by the publiclyaccessible network source, to settings of the first network equipment.10. The gateway equipment of claim 9, wherein the sending of thecommunication to the first network equipment comprises sending thecommunication to the first network equipment using a specified accesspoint name.
 11. The gateway equipment of claim 9, wherein receiving thecommunication comprises receiving the communication using a specifiedaccess point name.
 12. The gateway equipment of claim 9, wherein thepublicly accessible network source comprises a publicly accessible widearea network.
 13. The gateway equipment of claim 9, wherein thecommunication comprises a mobile terminated message, and wherein thesending of the communication to the first network equipment comprisessending the communication to the first network equipment via wirelessnetwork equipment of a cellular communications network.
 14. The gatewayequipment of claim 9, wherein the comparing of the content of thecommunication with the previous content of the previously receivedcommunication comprises applying a machine learning data structure tothe communication to identify the pattern of activity, and wherein themachine learning data structure has been configured based on thepreviously received communication.
 15. The gateway equipment of claim14, wherein the machine learning data structure comprises a neuralnetwork trained based on the previously received communication.
 16. Thegateway equipment of claim 9, wherein the functions that the firstnetwork equipment is capable of performing exclude encryption of acommunication from the first network equipment and decryption of thecommunication to the first network equipment, and wherein the additionalfunction enabled for the first network equipment comprises theencryption of the communication from the first network equipment and thedecryption of the communication to the first network equipment.
 17. Anon-transitory machine-readable medium, comprising executableinstructions that, when executed by a processor of a user equipment,facilitate performance of operations, comprising: receiving, from agateway device, data that has been communicated via a network device,wherein the data has been analyzed to determine an anomalouscharacteristic of a transmission of the data, and wherein the datacomprises operation data indicative of operations performed by thenetwork device; receiving an indication that the gateway device provideda function to the network device; and supplementing capabilities of thenetwork device, resulting in supplemented capabilities, wherein thesupplemented capabilities comprise an authentication capability foraccess, via a publicly accessible network, to settings of the networkdevice.
 18. The non-transitory machine-readable medium of claim 17,wherein receiving the data from the gateway device comprises receivingthe data from the network device using an access point name.
 19. Thenon-transitory machine-readable medium of claim 17, wherein the networkdevice received the data using an access point name from the gatewaydevice.
 20. The non-transitory machine-readable medium of claim 17,wherein the data comprises a mobile terminated message.